I was wondering about that... Does it also take into account a small business phone book (which might be stored with personal contacts on a smartphone - oops!).
More whimsically, what if my store has a parrot that remembers customer names?
>Does it also take into account a small business phone book (which might be stored with personal contacts on a smartphone - oops!)
Yup, the GDPR covers those business contacts, to the extent that the contacts are named individuals rather than corporate ones (i.e. the contact stored is joe.bloggs@example.net rather than sales@example.org).
There are clearly legitimate interests in doing so, though, so processing those data in that way should be permitted.
